CVE-2026-26461

Summary

A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.aver.com/Downloads/search?q=PTC320UV2
• https://github.com/spaceraccoon/disclosures/blob/main/2026/CVE-2026-26461.md

• ←Previous
• Next→